FYI - PuTTY 0.63 released 2013-08-06

Brian Beck - Mon 12/08/2013 14:51:19 CEST +0200

Hello KiTTY developers!

Just an FYI on the new PuTTY release so that you may incorporate the fixes into your next excellent KiTTY release.

Changelog from Simon's site:
These features are new in beta 0.63 (released 2013-08-06):

     Security fix: prevent a nefarious SSH server or network attacker from crashing PuTTY at startup in three different ways by presenting a maliciously constructed public key and signature. See vuln-modmul, vuln-signature-stringlen, vuln-bignum-division-by-zero.
     Security fix: PuTTY no longer retains the private half of users' keys in memory by mistake after authenticating with them. See private-key-not-wiped.
     Revamped the internal configuration storage system to remove all fixed arbitrary limits on string lengths. In particular, there should now no longer be an unreasonably small limit on the number of port forwardings PuTTY can store.
     Port-forwarded TCP connections which close one direction before the other should now be reliably supported, with EOF propagated independently in the two directions. This also fixes some instances of port-forwarding data corruption (if the corruption consisted of losing data from the very end of the connection) and some instances of PuTTY failing to close when the session is over (because it wrongly thought a forwarding channel was still active when it was not).
     The terminal emulation now supports xterm's bracketed paste mode (allowing aware applications to tell the difference between typed and pasted text, so that e.g. editors need not apply inappropriate auto-indent).
     You can now choose to display bold text by both brightening the foreground colour and changing the font, not just one or the other.
     PuTTYgen will now never generate a 2047-bit key when asked for 2048 (or more generally n−1 bits when asked for n).
     Some updates to default settings: PuTTYgen now generates 2048-bit keys by default (rather than 1024), and PuTTY defaults to UTF-8 encoding and 2000 lines of scrollback (rather than ISO 8859-1 and 200).
     Unix: PSCP and PSFTP now preserve the Unix file permissions, on copies in both directions.
     Unix: dead keys and compose-character sequences are now supported.
     Unix: PuTTY and pterm now permit font fallback (where glyphs not present in your selected font are automatically filled in from other fonts on the system) even if you are using a server-side X11 font rather than a Pango client-side one.
     Bug fixes too numerous to list, mostly resulting from running the code through Coverity Scan which spotted an assortment of memory and resource leaks, logic errors, and crashes in various circumstances.

Thanks in advance for merging the new PuTTY code into KiTTY!!!

Floris - Tue 13/08/2013 09:20:34 CEST +0200

Cyd is already working on it, see http://www.9bis.net/kitty/?action=forum&id=0401 .

Cyd: Thanks a lot! I'm forced to use PuTTY at the moment. ;)

Cyd - Tue 13/08/2013 09:23:06 CEST +0200

First beta (with some known bugs) is available at fosshub mirror.

Brian Beck - Mon 19/08/2013 15:08:42 CEST +0200

Doh! Not sure how I missed the thread on the work already in progress...and just how much of an undertaking it is!

I thought I had looked at the forum posts, but I either missed it or was looking at an old local cache. It seems I posted quite a bit later than what was already here. Note to self: F5

Thanks Floris...and thanks Cyd!! I may play w/ the betas as they appear if I get the chance. Otherwise, I'll just wait for the next release. Thank you for all your efforts!

-B

Answer

The forum is actually closed